Privacy policy
Draft: this text has not been reviewed by a lawyer yet and is not in effect.
TrekSathi is made by Lukla Logic. This page explains what the TrekSathi app and this website collect, why, and who can see it.
What we collect
- Account: your phone number or email address (to sign in with a one-time code) or, if you sign in with Apple or Google, the email address and name that service shares with us (Apple lets you hide your email behind a private relay address); display name, language and the permit group you choose (Nepali, SAARC or foreign), used to show the right rules and prices.
- Trips: route, itinerary, dates and visibility. Private trips are visible only to you.
- What you post: condition reports, cost reports, checkpoint reports, questions and answers, with an optional photo. These are public with your display name and role badge. If you allow it, a report records whether it was made on the trail (GPS-verified); the coordinates themselves are not shown publicly.
- Matching and chat: listings you create and messages you send to people you have connected with.
- Safety (only if you turn it on for a trip): emergency contacts (name, phone and/or email), check-ins with time, place and — only if you opt in, or when you send SOS or ask for help — your location. Contacts receive messages only about your trips.
- Family Follow links: anyone with a link you create can see that trip's plan, check-ins and route conditions until it expires or you revoke it.
- Missing-person reports: public only after a moderator reviews them. Passport numbers, identifying marks and family contacts are visible only to verified rescue partners and moderators.
- Push notifications: a device token, if you allow notifications.
What stays on your phone
Recorded GPS tracks, waypoints and downloaded offline maps are stored only on your phone. They are never uploaded unless you export and share them yourself. When a trip pack finishes downloading, the app tells our server only that it finished, and when.
What we don't do
- No advertising, no selling of data, and no third-party analytics in the app or on this website.
Who processes data for us
Data is stored with Supabase (database and file storage). If enabled, check-in and SOS messages to your contacts are sent through an SMS provider and an email provider, and push notifications through Expo. If you sign in with Apple or Google, that company confirms who you are; we never see your Apple or Google password. This website is served by Cloudflare and loads its fonts from Google Fonts.
Your choices
In the app you can edit your trips and emergency contacts, revoke Family Follow links, and choose whether to share completed treks. To delete your account, go to Profile → Delete account in the app, or follow these steps. Everything personal is deleted; reports and Q&A you posted stay without your name.